Live › vulnerability › CVE-2026-110491
Go to dashboardMalformed or incomplete requests to certain ONVIF operations on the E3 device make its ONVIF service stop accepting new connections until it recovers on its own. Any unauthenticated party with network access to the device can trigger this repeatedly.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Owners of E3 devices with the ONVIF service reachable over the network are exposed; devices reachable only from a trusted local network carry less risk. The sources do not name affected firmware versions. The exposure is limited to losing the ONVIF service, not to data or code execution.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Kiloview E3 Firmware | vendor | < 1.30 | 1.30 |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The ONVIF service on the E3 can be rendered unresponsive by sending malformed or incomplete requests to certain operations. The affected service stops accepting new connections while the rest of the device continues operating normally, and will recover automatically after a period. This can be triggered repeatedly by any unauthenticated party with network access to the device.
This page as .md · .json · in your agent: get_signal("CVE-2026-110491")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.